fix, autogenerated salt on installation

must be at least 32 characters long, Secutity's class will fail
otherwise
global language() function moved to Locale plugin
auth system review

- "remember me" feature completed
- minor bugs fixes
- started to work in "forgot my password" stuff