Fix password change so everyone can change their password and the
tokens are interpreted correctly.
Update the README file.