* Small code quality improvements
- Fix misleading JSDoc comment in cache.ts
- Mitigate timing-based username enumeration in Basic auth
- Extract duplicated TOTP configuration into private method
- Replace manual peer counter with clients.length in Prometheus metrics
- Simplify isValidPasswordHash return expression
* reset session.ts
this is currently worked on in the dev-oauth branch
* reset password.ts
no need to change
* specify unit for cache function
* remove type assertion
---------
Co-authored-by: Anghios <Anghios@users.noreply.github.com>
Co-authored-by: Bernd Storath <bernd@berndstorath.de>
