New issue Don't reveal whether password is <20 or >20 characters in RPC

From Bitcoin Pull #4728

It seems bad to base a decision to delay on the password length, as it leaks a tiny bit of information.

This doesn't change DoS potential as it is trivial to hold up all RPC threads in another way for someone in the rpcallowip list.
Merge pull request #689 from whitj00/patch-4

 New issue Don't reveal whether password is <20 or >20 characters in RPC