fixed password hashing and salting