add server-host env var, update readme
clean up for multiline password files