add md5 to hasPassword