Change cookie signature comparison to resist timing attacks (based on code suggested by Robin Green and Austin Seipp)

style test

fun main () : transaction page = return <xml>{[test]}</xml>