Analyse if auth module is vulnerable to a timing attack and mitigate if so

[Rush]

https://groups.google.com/forum/#!topic/rubyonrails-security/ANv0HDHEC3k