security: use constant-time comparison to prevent timing attack

Merge pull request boybundit#24 from boybundit/develop

1.4.0

Merge pull request boybundit#20 from boybundit/develop

1.3.0

Merge pull request boybundit#16 from boybundit/reply-validation

Validate missing param in reply method