switch authentication to sha1