use md5 as its a bit longer & harder to guess