3 Commits

Author	SHA1	Message	Date
Nick Daly	22cce897bc	Made security.mdwn a little more explicit wrt bcrypt.	2013-11-12 21:13:02 -06:00
James Valleroy	2f7b56e6a9	No need to have avoid timing side-channel attack in user_add. We're just going to tell you if the user already exists anyway.	2013-11-11 07:34:27 -06:00
James Valleroy	3a696e0bb9	Fix check for already existing username in add_user. Add documentation of process for storing and validating hashed passwords.	2013-11-11 07:31:53 -06:00