Use constant time comparison to verify signatures.

Bump version to 0.2.  Update .travis.yml to install package first.