Updated config recommendation in readme

Made it so by default the user won't put in their email password into version control