removed md5 calculation on server side