What is difference between <credentials passwordFormat="MD5"> and <credentials passwordFormat="SHA1">?