Add compatibility for PHP 5.6's `hash_equals` function

 - Updated `verify_password` to use new function
 - Tests to cover warnings and use cases.