v5.0.1

• Use crypto.timingSafeEqual() instead of secure-compare module (#40)
• Use request.raw (request.req is deprecated) (#41)
• Bump tap from 12.7.0 to 14.10.7 (#42)