Allow CURLFile in request parameters
Added validation and test for non-int error_code defaulting to 0.
Use OS-specific directory separator instead of hard-coded forward slash
Ensure signature comparison always takes the same amount of time

to a void Remote Timing Attacks