use sha1 to encrypt password