replace + with . in bcrypt salt