Authentication against postgres users require unencrypted pa
It is possible to login with any password if query's password is null.
md5_postgres does not include 'md5' prefix on hash