use hashlib rather than the deprecated md5