added md5 to checklogin()