More secure comparison of HMAC strings

To avoid timing attacks. The implementation of SecureCompareStrings is pulled
directly from python 3.4 sources.