some security fixes: creating salt and hash password. other minor fixes.