Move db/users pass field to VARCHAR(40) for SHA1