Check sha1(password) instead POSTed sha1