title: Salted password hashes
body: <p>I am trying to create a login system for a web application, but I am stuck on a couple of points. I am storing the password in my database using a sha2-512 hash with a 128 bit random salt.</p>
  
  <p>However I currently have the password posted in plain text to my application using a html form, both when the account is created and when the user logs in. I know this is wrong.</p>
  
  <p>Do I need to hash the password in the client? If so how do I take into account the salt which is currently generated and stored on the database?</p>
  
  <p>NOTE: I am doing this to learn not to use in a production system</p>