rename salt into passwordSalt