HMAC authentication for RESTful web applications