minor: modified description
use sha1 instead of plain text for password