add tests for GCM _auth_decrypt; fix bugs in _auth_decrypt and constant-time-equals