Remove salt from default plugin config

[githubnemo]

Steps to hijack your users:

1. Get a good look at the database (atlas.civcraft.net):

   select count(*), password from users group by password order by 1;

2. Take one from the highest and guess that it must be a standard password

3. Try to re-create the password

   echo -n 1337539sdfwwfWWDWFwwdfwQWFSCQqEFSAZ123456 | sha1sum

You should really use a different salt. At least now.

[netizen539]

Yeah it should probably be removed. However that database is no longer active.

[githubnemo]

But there are still passwords from users. It is not unlikely they use the same password for other services (like minecraft). These passwords are now easily guessable and are available to the public with their minecraft usernames. If that database is not used anymore, remove it or make it non-public for the sake of your users.

[netizen539]

Thanks for pointing that out. The database should no longer be accessible.