user creation + password/salt working