Add POSTGRES_PASSWORD and USER, with warning on no password

Fixes #31
Can we add quotes here? It's more symmetrical
```if [ "$POSTGRES_USER" = "postgres" ]; then ```