Hello.
Since there are plans/efforts to introduce additional authorization
methods in nearest feature I suggest to refactor the code so it
wouldn't mention md5 when it possible. `md5Salt` for instance could be
not only "md5 salt" but also "sha2 salt", etc - depending on what
authorization method was chosen.
Suggested patch (first of many, I hope) renames `md5Salt` to more
general `pwsalt`.
Does it sound reasonable?
--
Best regards,
Aleksander Alekseev