Prevent timing attacks on passwords

Use a constant time string comparison.
Merge pull request #1 from tilgovi/passwordtiming

Prevent timing attacks on passwords