always used embedded salt for bcrypt-encoded hashes