Noting rpcpassword

It's in the config file. Don't deploy that to production without changing it.