Constant-time equality comparison of HMAC strings without dependency

I nominate this change for the constant-time equality comparison. It adds no dependencies. Tested on Python 2.7 and 3.4.