fix storing and verifying of scram passwords

This is fix for #301