Fix verify to return false instead of raising error about argon2-cffi

[hynek]

Yeah and I may do the API differently if I designed it today. But can you imagine what would happen if:

1. I changed the API from raising an exception to returning False? (free entry on all existing installations)
2. Had one API that raises and error and one API the returns False? (people would keep mixing it up leading to free entry on some installations)

TBH I cannot find a responsible way to make you happy without introducing a high probability of security vulnerabilities due to changing/inconsistent APIs.

[ranisalt]

I have an idea. You can (and probably should) keep the exceptions BUT you could raise a different exception on verification failure. Users may proceed differently on mismatch or other failuer type.

[hynek]

Yeah I planned a VerificationError sub-class WrongSecretError or whatever that gets caught along as before but allows for finer grained handling.

[hynek]

Fixed in e7aaa80.