md5 encryption like requested, is private though, so no calling from
outside