[Security] fixed usage of the salt for the bcrypt encoder (refs #8210)