But no, you can't re-hash with a new salt without access to the plain-text password. If you could, so could the bad guy :)
Yes you can, if you believe this: http://benlog.com/articles/2008/06/19/dont-hash-secrets/ This is exactly why HMAC is more complicated than just:
hash(message+secret)