use crypto instead of MD5 fixed #2