check password md5 checksum