Use crypto module if possible

The new release will use the method crypto.timingSafeEqual if available. Older versions still fallback to this package's safe compare method.