pwd creation/check now with proper salt and backward compatability