Secure compare password
Secure API keys

Reduce possibility of timing attack and HMAC keys in the database