DB: User.Password => MD5 varchar(40)