fix passwords to use salt