Add AS::SecurityUtils.secure_compare for constant time string comparison
Use AS secure_compare in AS::MessageVerifier
Use AS secure_compare for CSRF token comparison
Merge pull request #17369 from rails/secure_compare

Secure compare