Constant-time string comparison in Phalcon\Security::checkHash()

Fix #1755
Updated CHANGELOG
Merge pull request #1757 from sjinks/issue-1755

[1.3.0] Constant-time string comparison in Phalcon\Security::checkHash()