modified forms authentication to store the hash salt with the user record in the db. pushed the passwordhshgenerator dependency down to the repository since its only used now for repo password compares.