* <li><code>hash</code>, if the password is valid and the hash
* doesn't need to be updated</li>
* <li>a new hash, if the password is valid but the hash in the
* <li><code>hash</code>, if the password is valid and the hash
* doesn't need to be updated</li>
* <li>a new hash, if the password is valid but the hash in the