Add compatibility for PHP 5.6's `hash_equals` function

 - Updated `verify_password` to use new function
 - Tests to cover warnings and use cases.
I notice `PasswordCompat\binary\_strlen($ret) <= 13` omitted in your revision.