Password must not be sent with md5 encryption