Security Issue: md5 hash of password is stored in the cookie being sent _unencrypted_ between the client and server
Meaning that nobody does not even need to break in to the server to break the password hashes with pen and paper
