updated to better password hash: use crypt instead of md5