Do not use user password to build authentication cache key. Use sha1() instead of md5().

This way it's more secure. Also password change does not invalidate the cached
username/host, so there was not really need for including password there.