Secure compare

Add AS::SecureFactory.secure_compare for constant time string comparison
no, the idea of this PR is use a unique implementation of secure_compare in all the framework instead of depend on multiple implementations.