Create password verification record

Create and verify a new Password verification record. The verification record can only be created if the provided user credentials are correct. If the password has expired under the password expiration policy, the request is rejected with password.expired and the user must reset their password before continuing.