user authentication and login using custom authorization header with user-specific salt