use hashlib instead of md5 library