The md5 function creates a 32 character string. Storing it in a 20 character field will cut off some of the password. You need to change your password varchar to 32.