use securecompare gem and use secure_compare for JWE authentication tag too

ref #15