Add salt to session token