[Serusers] password length & ha1 calculation