Add user verification support

[psanford]

We should support User Verification. When using user-verification, we should create the key using the provided password (or from a kdf of the password).

This will allow us to support sites that require user verification. We'd also need this for supporting resident keys.