Fix possible timing leak in validate_password (#1535)

Fix possible timing leak in validate_password (#1535) #1400