added PasswordUtils, which does salted md5