corrected bug on '-' in salt for Blowfish where we should keep '/'

added an option to still convert the '/' in '-' for path-compliant purpose
added redirect after reentering a correct password for secure access. It will make sure every session data is reloaded correctly, and avoid accidental 'go back' browser action.