Update README.md

Updated to explain we recommend Tails for logging into the application server and put in the correct number of passwords the journalist will have to store/remember.