Add instructions to README about password

Fixes gh-2