pub fn constant_time_eq(a: &str, b: &str) -> bool
Constant-time string comparison, to avoid leaking the token via timing.