re-added md5 encryption

killed some bug in auth_check()