user use sha1 pwd