Use the Accounts object
Fix for possible password exploit

The password is stored in the session, so in the client console it could easily be return by "getting" the session value for. This could be done by anybody who get's access to the browser.
Workaround: unset the password, cause it is no longer needed
Update README.md

Fix typos
Better project description, closes #58