Update README.md

Update README.md - tests on different shops are successfully for years.

Author: Schrank

README.md

@@ -1,4 +1,5 @@
-#Ikonoshirt_Pbkdf2
+# Ikonoshirt_Pbkdf2
+
 Ikonoshirt_Pbkdf2 implements PBKDF2 (http://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf) for the basic password hashing in Magento. You have the choice between many hash-algos, iteration-count, key-length, etc. Have a look into the config.xml
 
 This module changes by default all passwords of the user AFTER THEIR login to the recommended method for password "hashing" PBKDF2! All password means: Customer, Admin and passwords for the API.
@@ -7,7 +8,13 @@ It is important to understand, that the password is replaced AFTER login. It mea
 
 This module should be compatible to Magento EE - the tests run on mage-lite (certification version)
 
-##For Developers
+# Installation
+
+*CHANGE THIS!*
+prefix: my_magento_store
+
+
+## For Developers
 
 We have overwritten no classes.
 
@@ -18,7 +25,7 @@ I tested everything I thought it is a good idea. If you find a bug, open an issu
 
 For found bugs, I use TDD, so first write a test which fails and is ok after the fix.
 
-##Thanks
+## Thanks
 
 Thanks to thebod for talking all the time about security and teaching a sense for it.
 
@@ -31,9 +38,9 @@ Thanks to Anthony Ferrara who built PHP-CryptLib and provides test vectors for p
 ##Attention!
 Don't use it in production before testing! We can't accept any responsability for this code at the moment.
 
-This Module changes the password creation and validation of magento. Don't use it in production! My first tests are good and the login for admin and customer works.
+This Module changes the password creation and validation of magento.
 
-##Parameter and Defaults
+## Parameter and Defaults
 Iterations used for the PBKDF2, >= 1000 recommended
 This is the main factor to slow down the hashing
 iterations: 10000
@@ -51,12 +58,13 @@ salt_length: 16
 
 "Optionally, to avoid any possible interaction between other applications that use a salt, an application-, message- or user-specific variable called purpose may be prefixed to the randomly generated part of the salt as given below;
 S = purpose || rv."
+
 CHANGE THIS!
 prefix: my_magento_store
 
 If you have a running shop, all password hashes of the user were encrypted with md5.
 You have to activate this option to check for the old hash too.
 check_legacy_hash: 1
 
-##TODO
-- Add a admin-formular to change all passwords to new ones and send mails with new passwords
+## TODO
+- Add a admin-formular to change all passwords to new ones and send mails with new passwords