Use Devise secure_compare to compare tokens