function md5form(f) {
  f['password_hmac'].value = hex_hmac_md5(hex_md5(f['password'].value), f['front-end_challenge'].value);
  f['password'].disabled = true;
  f.submit();
  f['password'].disabled = false;
  return false;
}