Update README.md

Add "why no password" section to FAQ.