Verify password if hash given as second argument