login check with md5 hash