Pretty sure they mean bcrypt(md5(pass+username)) since changing hashing algorithms is generally an additive change.