pwd encrypted by sha-1 and pwd checked