title: One time salts and server password comparison
body: <p>I've read that one of the more secure ways to authenticate a user is to use one time salts when hashing the password. What I don't get is:</p>
  
  <p>If the client generates a new salt every session, won't the resulting salt+password hash be different every session? If so, how will the server be able to compare the sent password with it's stored password? Is there a way for servers to compare different hashes and still be able to discern that the same password was used?</p>
  
  <p>(Disclaimer: I'm not trying to reinvent the wheel/write a login protocol (I know, I know: use SSL/TLS). I'm just curious as to the high level functioning of login protocols)</p>