by Moodle Developer.
it'll be our own custom php page running at moodle sever, will check against stored hashed password and return true/false to calling ajax script. please advise.