+ passwords now hashed by md5