password is now hashed with SHA256 rather than MD5