Fix #2856
Make CI_Session's HMAC comparison time-attack-safe
Merge changes from develop