shorten salt length
moved auth unit test to test/