Elgg/Elgg — pull request #7597 by mrclay (2014-12-03 15:35:35+00:00)
Title: security(tokens): adds HMAC API and improves token-based security

Uses HMAC and constant-time string comparison for tokens in actions,
friend invites, password resets, and email validation.

Replaces #7245