82480b8
- backport fix from 2.3.5 for CVE-2009-1384/#502602: prompt varies based on whether or not a user's account exists