public static function hashEquals($safe, $user)
    {
        // PHP >= 5.6.0 has "hash_equals"
        if (function_exists('hash_equals')) {
            return hash_equals($safe, $user);
        }

        return self::timingSafeEquals($safe, $user);
    }