Verify password API fails on barcode; returns success on deleted users

[Bill Erickson]

Evergreen 2.10 (beta).

The API call open-ils.actor.verify_user_password, used by the staff client to test passwords, fails when tested with a barcode. As a result of the following change, the code assumes a username is supplied:

http://git.evergreen-ils.org/?p=Evergreen.git;a=commitdiff;h=5ddb3f61b5cf9c97cf5b45c42209a1083e8efff8#patch1

As a secondary part of this, I confirmed that the API call returns true even if the patron tested is marked as deleted. It should probably return false.

Patch en route.

[Bill Erickson (berick)]

Fixes pushed:

http://git.evergreen-ils.org/?p=working/Evergreen.git;a=shortlog;h=refs/heads/user/berick/lp1557621-pass-verify-cards-and-deleted

From the commit:

    * Fixes bug that caused password verify calls to fail with an exception
      when tested with a barcode.

    * Verify API always returns false when tested on deleted users.

    To test:

    1. In the staff client, navigate to Circulation -> Verify Credentials
    2. Confirm username and barcode lookups return success for a non-deleted
       user using the correct password.
    3. Delete a test user in the database:
       UPDATE actor.usr SET deleted = TRUE WHERE id = <id-of-test-user>;
    4. Re-do step 2 confirming non-success results are returned.

[Galen Charlton (gmc)]

Pushed to master and rel_2_10. Thanks, Bill!