checks the password against user and returns true if OKparamresourceparamuserparampasswordreturn
returns SHA1 hash of pw for user if availableparamresourceparamuserreturn