I don't think this rollback is necessary anymore. I had originally had this in there when we were going to store the salt as a separate field on user, and that field was going to be used to determine if a user was legacy. Now that the password field is used to store everything, I think this can be safely removed.