Checks a presented app password against a stored hash without blocking the event loop.
what the client sent
the stored hash
a promise of true when it matches
Checks a presented app password against a stored hash without blocking the event loop.