document example config passwords
fix up README some more and helpful comment in config