Security update, based on PR #348

Based on PR #348: refs #4701: Prevent hash length extension attack.

Create property salt separator (by default "~"), flexible format better than statical.
Update salt generation: added optional support `hash_hmac()`.
Update typos, add crosslinks\notice for guide.