Fixes timing attack when comparing passwords.
Fixes timing attack when comparing CSRF tokens.
Fix missing space when ordered.
Merge pull request #701 from Mickael-van-der-Beek/master

Fixes two timing attack vulnerabilities
Merge pull request #703 from Gank/master

Fix missing space when ordered.