use md5sum instead of hasPassword for recovery generation since some web servers crashes with hashPassword urls