Move TODO comments from login.php to TODO.txt
Add readme with warning