Using constant_time_compare to check signed requests