assume urlencode(base64_encode('password')) for the password url parameter
change to sha512 instead of sha1