password is now hashed using SHA1.