use timing safe compares
Merge branch 'browserid' into browserid-sad