Add POSTGRES_PASSWORD and USER, with warning on no password

Maybe we should instead just set `authMethod=md5` and `authMethod=trust` respectively in each of these `if` blocks so we can have this line once after the `if`?