Add password verification
Add password verification

This change adds a callback for the SASL library to use to verify
passwords, if passwords are specified in the user database.  The
callback is careful to utilize constant-time password comparison
logic to reduce the chance a timing-based attack will work.

klmitch/humboldt,klmitch/humboldt