Server-side cryptographically correct pass checking for allocate_buckets
Fixes: #40 (closed)
Note I reduced the scope of #40 (closed) and only address allocate_buckets
here as this is a self-contained set of changes and the branch is large enough already. The other methods aren't going to be completely trivial so I'll address them individually.