Constant-time comparison to mitigate timing attack in verifyPassword

I have not been able to test this patch yet, however if I am correct it should mitigate a timing attack vector as described in the following issue: https://github.com/PeterScott/pwstore/issues/9