439507 Avoid timing leak in MD5 compare

Also-by: Benny Baumann<BenBE@cacert.org>
439438 DataSourceLoginService does not refresh passwords when changed in database