switch to sha1 for authentication