password is not hex_sha1 encrypted