User passwords now saved as hash of username, salt and password