don't set user password initially
README update