testing passwords on the server using md5