BCrypt gives false positive when checking long passwords with the same prefix