Fixes for strict mode

plus change default salt len to be hash length to match JOSE (see http://www.ietf.org/mail-archive/web/jose/current/msg02905.html)