change MD5 -> SHA1