add explainatory notes
add server-side salt to avoid giving access to all accounts if the db is compromised.