secureStringEquals: Ensure both parameters are strings.

Apparently strcmp will accept arrays and then do weird things.

http://danuxx.blogspot.com/2013/03/unauthorized-access-bypassing-php-strcmp.html