adding random delay to prevent timing attacks on user auth
Merge branch 'master' into local