userpasswords are now encrypted with sha1