add md5 for password