Create a predicate to match passwords

This is more clear for people who want to use this in 'if' statements and makes for a more consistent
API over authenticate().