set password to insecure
use openssl instead of own sha1 code