bitly/google_auth_proxy — pull request #24 by vikrum (2014-07-23 00:23:55+00:00)
Title: Fixed timing attack in cookie validation.

- Changed from using string == to hmac.Equal
- See more details here: http://verboselogging.com/2012/08/20/a-timing-attack-in-action