engineVerify() comparison can be variable time, because there are no secrets
Cleanups (thx zzz)
Missed comment change
Sped up GroupElement.equals()

This probably isn't constant time because of the Z1==Z2 check. If it should be,
we can drop that first part (and there is still a speed increase from removing
the two FieldElement.invert() calls).