create salt for password
update references