changed password hash and salt behavior. We didn't care about the hash up to now!