#670. As a default strategy, we are appending the salt to the generated
token.  This way we can re-encode the token to see if it is actually in
the database.