use hmac.Equal for consistent-time equality