Uses a constant time string comparison to avoid timing attacks.

Ruby's == string comparison will short circuit once it knows the string is not the same. This could allow a potential attacker to figure out the app secret with a timing attack against the user's webhook endpoint. This uses ActiveSupport's secure compare function to avoid that.
Merge pull request #68 from philnash/fix-timing-attack

Uses a constant time string comparison to avoid timing attacks.