switch md5 to sha1