goji/httpauth — pull request #2 by justinas (2014-06-01 09:59:04+00:00)
Title: Use constant-time comparison for credentials

Taking cue from martini's [auth](https://github.com/martini-contrib/auth), use constant-time comparison to prevent timing attacks.