secured admin login with hash and salt