Update README with more info

This notes the API change that happens if you change the password.