Replace "or" with "||".

In PHP, "or" has unexpectedly low precedence.  "||" behaves more
like most people expect.
Minor optimization in Security.stringEquals().

Thanks to Graham Campbell for the suggestion.