Changed password hash use user ID as salt instead of email address. Retained old salts to work. This will allow email addresses to be changed without password hash updates.