In Clojure, the = function checks the equality of strings lazily. This is good for efficiency, but bad for cryptographic security, as it gives an attacker potentially useful information.

A strict-seq= function is needed in the compojure.crypto namespace. Whilst = returns false the moment it finds an item in the sequence that does not match, the strict-seq function will always check every value in a sequence.