Using Crypt::hashEquals() for hash/token comparisons

Use Crypt::hashEquals() for comparing hash/token values instead of using === operator that can cause cause incorrect results or timing attacks.

Usage:

Crypt::hashEquals($hash_1, $hash_2);

Crypt::hashEquals($hash, user_pass_rehash($user, $timestamp));

Crypt::hashEquals() returns TRUE when the two strings are equal, FALSE otherwise.