flip comparison in http_auth so BCrypt::Password can be used

I also added some comments w/ examples of bcrypt usage.

\- Felix