Passwords are now stored unsalted in the database with a SHA1 hash