[1.3.0] Constant-time string comparison in Phalcon\Security::checkHash()

See #1755