Merge pull request #4910 from apache/couch_passwords_very_return_false

couch_passwords:verify should always return false for bad inputs