changed the way password are stored and use one salt per user now
config is now stored in config.json