switch to sha1 hash cred