encrypt user password using sha1