keep md5 as encryption when it was already used, to ensure backward compatibility