add wrong salt check to decode function