Use bcrypt's built-in function for checking the password hash

[bliepp]

Right now the method check_password_hash uses hmac.compare_digest(bcrypt.hashpw(password, pw_hash), pw_hash) to check if the password matches the provided hash. This is exactly how the bcrypt module implements its checkpw function. For the sake of reducing code duplication this should be replaced with bcrypt's provided function.