OMP: add function to check the staff password

This checks the crypted staff password in the password section of the
OMP site config.  (Rather than just looking at the header database
password which happens to be the same thing but not crypted.)