Use `===` to compare password hashes

Hash strings should be compared with `===` because PHP compares two numerical strings as numbers.

`"5938266572196464632409940308852871296620" == "5938266572196464000000000000000000000000"` evaluates to `true` before PHP 5.4.4. Details: <http://www.phpsadness.com/sad/47>.