Add fixed time compare

Changing password comparison to use https://github.com/hueniverse/cryptiles/blob/master/lib/index.js#L46. Liking this auth function. Still keeps it simple. Pretty minimal change.