fix storing and verifying of scram passwords

This PR fixes #301