Checks two strings for equality without leaking timing information.