Authenticate against old password.

If password_digest is empty authenticate against old password and upon
success save the input into password_digest.