use uniqid to get password salt and move before update to after execute validate data