updates to index.php

more to description and moved the generated password