change to PasswordAuthentication no and update docs