Fix ignore of WCFSetup.css
Use secure compare to validate master password