test pwhash_str_verify() with an invalid character