add simple salt pw hashing