use crypto instead of md5 fixed #2