Add secure_compare to Rack::Utils

Conflicts:
	test/spec_utils.rb
Use secure_compare for hmac comparison

 * Closes CVE-2013-0263
Prevent symlink path traversals

 * Closes CVE-2013-0262
Add release notes for todays releases
Master is now 1.6-ish, as it has removals