Checks a presented app password against a stored hash.
what the client sent
the stored hash
true when it matches
Checks a presented app password against a stored hash.