Harden HMAC verification. props duck_. [28053] for 3.8.

Built from https://develop.svn.wordpress.org/branches/3.8@28054


git-svn-id: http://core.svn.wordpress.org/branches/3.8@27884 1a063a9b-81f0-0310-95a4-ce76da25c4cd
Bump Akismet external in the 3.8 branch to 2.6.0.


git-svn-id: http://core.svn.wordpress.org/branches/3.8@27887 1a063a9b-81f0-0310-95a4-ce76da25c4cd
3.8.2

Built from https://develop.svn.wordpress.org/branches/3.8@28057


git-svn-id: http://core.svn.wordpress.org/branches/3.8@27889 1a063a9b-81f0-0310-95a4-ce76da25c4cd