add md5 & salt on password