decode unicode passwords before salting+hashing (bug 858262)