Made verify callback optional, added tests

Always requiring applications to provide a verify callback does not
really make sense for LDAP because users are authenticated (and
authorized) from LDAP. Thus made it optional.

Also added test for reading credentials from user defined keys.