fix a bug, and add in salt grabber
implement new hashing scheme for login