Passwords are hashed with a unique salt per user in db