fixed salting to be actually secure