Avoid field inverse for r == x comparison

As suggested by @gmaxwell. This seems to give a 3% speedup for verification.

Builds on top of #119.
Can you change `order` to `field order`? A nitpicky thing but I got myself confused reading this as the group order ... "then what is `p`?"