(fix) Constant time HMAC comparison

Fixes #22.