use sqlcipher_malloc and sqlcipher_free
improve test for rekey using same password
move kdf_salt, et al. from codec_ctx to cipher_ctx