crypto/pbkdf2: reject salt if it's too short, instead of failing

Closes #275.
Add GIT-Access check to ./configure
Clarify GIT-Access
Merge pull request #276 from grawity/pbkdf2-randsalt

crypto/pbkdf2: generate a new salt if it's too short
hostserv/offer: User may sometimes not be logged in