Use hash_equals when comparing to pwhash from cookie This should prevent a timing attack against this parameter to disclose the stored passsword hash.
Use hash_equals when comparing to pwhash from cookie
This should prevent a timing attack against this parameter to
disclose the stored passsword hash.

Signed-off-by: Aidan Woods <83a07f38d7e4b1def722fa1479e1cf3fe5b81441@gmail.com>

jacobsalmela/AdminLTE,jacobsalmela/AdminLTE,jacobsalmela/AdminLTE,jacobsalmela/AdminLTE