added salt on password