passwords stored in db are hashed MD5 now, restful token auth works approperly: base64(username.md5(password))