zeroed out salt and char password for added security after verification