sql for password field

40 length for sha1 hash