Use `===` to compare password hashes (see #7175)