Change cookie signature comparison to resist timing attacks (based on code suggested by Robin Green and Austin Seipp)

fun main () : transaction page = return <xml/>