Moved from md5 to sha256 for password hash