Add a note to Rack::Utils.secure_compare doc

I mistakenly used this to compare plaintext before.  Probably good
to warn others off.  The OpenSSL docs have a similar warning about
using 'fixed size'