Switch to hmac.Equal, go1.1 has been released