http.auth: Add new function to verify passwords