So each user will have their own salt stored in the database?

I'm still unconvinced by your use of a random string generator for the salt.

Surely ryanmr's method as well as mine would be better?