diff --git a/admin/js/plugins/clockpicker/clockpicker.js b/admin/js/plugins/clockpicker/clockpicker.js
index 7f208aa6..e930b4ff 100644
--- a/admin/js/plugins/clockpicker/clockpicker.js
+++ b/admin/js/plugins/clockpicker/clockpicker.js
@@ -1,5 +1,5 @@
 /*!
- * ClockPicker v{package.version} (http://weareoutman.github.io/clockpicker/)
+ * ClockPicker v0.0.7 (http://weareoutman.github.io/clockpicker/)
  * Copyright 2014 Wang Shenwei.
  * Licensed under MIT (https://github.com/weareoutman/clockpicker/blob/gh-pages/LICENSE)
  */
diff --git a/myems-api/core/user.py b/myems-api/core/user.py
index dfd80ff5..f0961a21 100644
--- a/myems-api/core/user.py
+++ b/myems-api/core/user.py
@@ -431,7 +431,7 @@ class UserLogin:
                        "             (user_uuid, token, utc_expires) "
                        " VALUES (%s, %s, %s) ")
         user_uuid = result['uuid']
-        token = hashlib.sha1(os.urandom(24)).hexdigest()
+        token = hashlib.sha512(os.urandom(24)).hexdigest()
         utc_expires = datetime.utcnow() + timedelta(seconds=60 * 60 * 8)
         cursor.execute(add_session, (user_uuid, token, utc_expires))
         cnx.commit()