implementing secure passwd using hashing and salt