update user model to move password salt factor to config