Bug 34893 added a return of a patron object from various checkpw routines - later in checkauth, however, we fetch the patron by username or cardnumber. We should instead capture and use the patron already returned