Can you identify a way to bypass our login logic? MD5 is supposed to be a one-way function right?