add two secret-field methods to EPrints::Database

These provide special functionality similar to ...::valid_login, which would probably be better handled in a DataObj but for whatever reason are defined in the DAO. EPrints::Database::secret_matches is like the inverse of the "fromform" attribute of "secret" metafields