Switching to a constant-time string comparison in the verify method
adding test for invalid signature
Merge pull request #17 from firebase/constant-time

Constant time string comparison function in verify method