Add hash_equals() to perform string comparisons that are not vulnerable to timing attacks.

RFC: https://wiki.php.net/rfc/timing_attack