support --typos options with --passwordlist

also add documentation for --passwordlist to TUTORIAL.md