replaze MD5 with SHA