corrected md5 salt length to be inclusive of pre/suffix