Harden HMAC verification. props duck_.

Built from https://develop.svn.wordpress.org/trunk@28053


git-svn-id: http://core.svn.wordpress.org/trunk@27883 1a063a9b-81f0-0310-95a4-ce76da25c4cd
3.9-RC1

Built from https://develop.svn.wordpress.org/trunk@28058


git-svn-id: http://core.svn.wordpress.org/trunk@27890 1a063a9b-81f0-0310-95a4-ce76da25c4cd
TinyMCE: make sure vertical resizing and menubar show/hide are set to default for each instance, fixes #27724
Built from https://develop.svn.wordpress.org/trunk@28059


git-svn-id: http://core.svn.wordpress.org/trunk@27891 1a063a9b-81f0-0310-95a4-ce76da25c4cd