security: do not accept the MD5 hash of a password
Merge pull request #5462 from Montellese/fix_password_security

security: do not accept the MD5 hash of a password