Password Verify DRY'd and hash slightly neatened