auth: usa sha1 for tokens

Faster... faster