Mention `userpass` authentication method in README