Differet timing interval are used for error message in case of wrong username and wrong password.
vulners.com/securityvulns/securityvulns:doc:4219