login uses MD5 authentication