Prepare a query for sign in

This preparation performs two jobs, one before the query executes and one after.

Firstly, it constrains the query to match the identity field passed to the action.

Secondly, it validates the supplied password using the configured hash provider, and if correct allows the record to be returned, otherwise returns an authentication failed error.