Avoid user-not-found timing attacks w/ dummy hash#15

cognifloyd merged 2 commits into

masterStackStorm/st2-auth-backend-flat-file:masterfrom

dummy-pw-hashStackStorm/st2-auth-backend-flat-file:dummy-pw-hashCopy head branch name to clipboard