Token SALT decoupled by UUID (see issue #5)