This is necessary but not sufficient to fix the bug.  There also need to be changes to make_password, and some assertions must be removed.  See my patch at https://code.djangoproject.com/ticket/20593#comment:7