fix: use a constant time string comparison function to compare a verification token (#272)

Closes #272

See merge request postgres-ai/database-lab!307