Updated authenticator to include query-less authenticate(). And added
challengePassword() for easy password->hash validation.