bug 9611: use checkpw_hash() instead of md5 hash for SIP2 logins