Change XSRFTokenUtility to be robust to timing attacks.

c.f. http://rdist.root.org/2009/05/28/timing-attack-in-google-keyczar-library/