Hash salt and first install

I was wondering, when do we set the real hash salt for our projects? We have it in
` - HASH_SALT=notsosecurehash`
but when does this change? Do we re-install site when going to Silta? I didn't find anything on salt in our readme.

@tormi 