uncommented PW and token salt definition