System: use timing attack safe string comparison on Request::forged

System: use timing attack safe string comparison on Request::forged #871