Added PasswordUtil::secureCompare()

secureCompare() is invulnerable to timing attacks as the comparison of two strings always takes the same time to finish (no early return).
Fixed hash creation
Added menuItemController for *Menu-PIPs
Use secure comparing for the access token