title: Storing encrypted password and salt or only storing encrypted password?
body: <p>I need a login system to check the user password.
  I know about salting passwords, but should I store the salt and the encrypted password or should I only store the encrypted password and the salt is somewhere in my app config file?</p>
  
  <p>Please pro and cons if there are some, thanks!</p>