Pylons/pyramid — pull request #320 by rfk (2011-10-15 00:17:58+00:00)
Title: Avoid timing attacks in AuthTktAutenticationPolicy

This factors out the timing-invariant string comparison code from
session.py and re-uses it for signature checking in AuthTkt code.