timing-safe-equal

timing safe equals, but for the browser