Better SSHA salt

1000 possible salts is way too few to provide any protection. Also, `srand` in older versions of Ruby doesn't use hardware entropy sources.

/cc @dbussink