not returning password and salt