fix login bug overwriting salts