adding specific detail about storing customers passwords

[cottsak]

this is super critical in preventing damage in the event of a breach. it's also easy to mitigate so it's best to include it

[itaifrenkel]

thanks !