Add bcrypt errors if verification fails on an invalid hash.

This can occur if verifying new-style hashes on old versions.

This is IMHO a better approach to solving #4607 rather than trying to mutate the password, as it's a hard-failure, and indicates that the password wasn't necessarily invalid, but it was the hash itself that was invalid...