Add hash_equals for hmac comparison

PHP 5 >= 5.6.0 offers a build in function for a time attack safe string comparison. So lets use it!