make sha1 explicit default for password hashing

only takes effect on django 1.5 as this django setting was only added in 1.4
extract IndexedSchemaFormBase class
refactor check_actions for better reuse