Update crypt.php

Comment added: alternative comparison function that doesn't require bitwise operators and still mitigates timing attacks.
The weird % hack is probably fine, but it's not necessary.