Use a fixed-time algorithm to compare hashes

Hi Alex! I'm not sure if it's necessary in this case (you're a security wiz, so you probably have a very good reason for using `===` instead of a more elaborate comparison), but I thought it might be helpful to use a fixed-time algorithm to compare the password hash and digest in `checkHashMatch`.