auth change md5 for sha1