add important note about password hash

[RealAngeleno]

Added comment about getting password hashes since I believe it is very important and is not listed anywhere. This is for config.php

[kaguy4]

Makes sense