oops... used md5 instead of sha1