added salt when creating password