Use a constant time comparison to avoid timing attacks

[copiousfreetime]

See https://github.com/rack/rack/blob/master/lib/rack/utils.rb