Compare MACs in constant-time.

As pointed out in,
https://github.com/cryptocat/cryptocat/issues/135#issuecomment-22839689