fixed password salt and permissions