reintegrate md5 password check for backwards compatibility