How would you even validate the password server-side if you're salting it at the client level?