Are you sure?  The global setting is a hash, but the model will take a plaintext password and MD5 (ew) hash it.