salt fix

There's an 'Undefined variable' notice if salt contains '$' character.
Merge pull request #39 from thwan/master

security: salt fix by thwan