[4.2] Validate passwords more safely

With `==` is a little bit dangerous. Example:

```php
var_dump( "1e3" == "1000" ); // true
```