Fixes per rescrv, pull #11

Pull returncode conditional up from recursive function macaroon_verify_inner to
non-recursive macaroon_verify_raw, to prevent timing attacks.

Revert MACAROON_SUCCESS enum value.