add md5 hash for password check