update pwd after using MD5