better salt, proper hash