Use `===` to compare password hashes (see contao/core#7175)