adding sql patch to update all passwords to be md5 masked