Changed md5 to sha1 and encrypted the password in cookie