Add hash_equals() to perform string comparisons that are not vulnerable to timing attacks.