salt + jsondecode for security