md5 added to password in user table