password needs to be 40 varchar for sha1 to work