fix mistake in password hashing for md5 auth
update readme