Fixes timing attack when comparing passwords.
Fixes timing attack when comparing CSRF tokens.
Merge pull request #701 from Mickael-van-der-Beek/master

Fixes two timing attack vulnerabilities