Security: salt no longer re-used ob password changes