Make the carp interfaces able to handle passwords

update the spec to test for password option too, and update README.md
and other minor related nits.