Use the 'stored_hash' parameter of the pbkdf2.verify() function

This will not change the behavior of the verify() function but is easier
to read.