Authenticate against hashed, salted passwords