Fixes #4 verifyCredentials() now sets the callback's result to false so the receiving end can handle an incorrect password scenario however they please.