Add compatibility for PHP 5.6's `hash_equals` function

 - Updated `verify_password` to use new function
 - Tests to cover warnings and use cases.
I'm not sure the purpose of the `<= 13` check. I checked the php source code and the comparison is there as well so I pushed a change to add that in.