use constant time comparison
browser version
Merge pull request #7 from csquared/constant-time-comparison

Constant time comparison