backup user not in README but created with default values, some security concerns

* Missing `mongodb_root_backup_name` and `mongodb_root_backup_password` in README may mislead users about the creation of this if they don't check the content of `defaults`
* I think we shouldn't have default values for passwords
* We may want to have conditional user creation and remove the `with_items` causing useless skipping on `--check`