md5 hash passwords

no more clear text user passwords to the database