Add AS::SecureFactory.secure_compare for constant time string comparison
Use AS secure_compare in AS::MessageVerifier
Use AS secure_compare for CSRF token comparison