> This function should test if the provided password is valid, and if so, return true and resave the user with a new salt and potentially a new iteration count.
>
> This violates SRP, as it should ideally call to <see cref="ChangePassword(SqlConnection, String, String, Integer?)"/> with the appropriate information, but that is done to allow a more simple API usage. The goal here is to make sure the user always uses the most up-to-date standards of our implemented password security, so we expect to update them on validation.