fix lost salt of password when changing user's permissions