fixing secret comparison with constant time compare

Conflicts:
	agora_site/agora_core/forms/user.py
using bleach to filter bad html