Update README.md

Security message about user and password