Refactor SecureCompare.

Don't rely on martini-contrib/auth for two reasons: 1) it calculates a sha256 of the strings prior to comparing, which is redundant; 2) the logic itself is so simple that it doesn't warrant adding a non-stdlib dependency.