Update README.md

added note about the root password