Change auth mechanism to improve security

We use CryptoJS lib to manage user connection. Password is the sha1 hash
of login+password. Javascript client side send sha1 hash instead of
plain password.