Accept only hashed password

Database password must only hold hashed password.
sha1() encryption is used. Not less secure md5()