Server-side cryptographically correct pass checking for allocate_buckets

Fixes: #40 (closed)

Note I reduced the scope of #40 (closed) and only address allocate_buckets here as this is a self-contained set of changes and the branch is large enough already. The other methods aren't going to be completely trivial so I'll address them individually.