forgot to update salt after password change; fixed