point developers to cacheword for password management

README.md

@@ -7,6 +7,9 @@ virtual disks for Android.  This app aims to show the most basic working
 examples of how to use IOCipher for learning the basics.  It does not show
 best practices for things like password management.
 
+IOCipher was designed to be used with the CacheWord library for password/key
+management:
+https://github.com/guardianproject/cacheword
 
 Please report bugs here:
 https://dev.guardianproject.info/projects/iocipher/issues

src/info/guardianproject/iocipherexample/FileBrowser.java

@@ -73,7 +73,11 @@ public void onCreate(Bundle savedInstanceState) {
     @Override
     protected void onResume() {
         super.onResume();
-        // TODO don't use a hard-coded password! prompt for the password
+        /*
+         * do NOT use a hard-coded password! Either prompt the user for the
+         * password, or use the CacheWord library to handle password prompting
+         * and caching.  https://github.com/guardianproject/cacheword
+         */
         if (!vfs.isMounted())
             vfs.mount("my fake password");