check user password on update, if it is in sha1 don't crypte else crypte it