Mitigate Timing Attacks On Basic RPC Authorization

see bitcoin/bitcoin#2886 and http://rdist.root.org/2010/01/07/timing-independent-array-comparison/