Fix a timing attack in RequestHandler connect password verification.