Authentication is now done in constant time.
SetNewPassword now checks password sameness.
Merge remote-tracking branch 'origin/develop'