Move salt used in getResetPasswordHash() to core.php