rephrase README section about the "download password" feature