Compares the caller's raw password against the stored encoded password. Defaults to PasswordEncoder.noOp.