using sha1 to has password in database now