compare hashes using slowEquals

Signed-off-by: Suhayb El Wardany <me@suw.me>