I think saveUser should take a cleartext password and generate the salt and hashed password itself. getUser should be authenticateUser, should take username and password and return whether the user is authenticated by searching the db for a record with that username and the hashed password.