Only check against the most recent password

Since we can store multiple password records for a user,
check that their password matches with the most recent
successfully set password.