WSSE Auth Cookbook: Timing safe digest comparison