Track Debian bug 550360 (apr_password_validate() vs. empty hash issue)

[herzbube]

Bug subject: apr_password_validate() always succeeds if hash parameter is empty string

URL: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550360