we won't call auth_user with md5 hashes as passwords.