Move password salt away from config.json

[Mayhem93]

Having the same password salt for each user/admin is obviously against good practices in security so we have to remove it from the config file and store it in the password itself (as it usually being done).

Note: this will make all passwords not match after implementing this, so it's best to start with a fresh database.