Update CONTRIBUTING.md with a note on passwords