fix(auth): validate salt payload strings

fix(auth): validate salt payload strings #255