the salt should still be passed, but we won't use it as we can have b…

…crypt tell us the salt)

lib/sorcery/crypto_providers/bcrypt.rb

@@ -76,6 +76,7 @@ def matches?(hash, *tokens)
           #return if the hash is nil or empty to save time
           return false if hash.nil? || hash == {}
 
+          tokens = tokens.first # we no longer use the salt from the tokens
           test = hash_secret(hash.salt, tokens)
           secure_compare(hash, test)
         end