simplest way to implement optional md5 local auth