Adds a timing safe string comaparison method.
Adds test to make sure it fails on invalid passwords.
Use a timing safe comparison method when comparing password hashes.