implement utilities to compute hmac/xor keys and encrypt response for ge...

...tSignToken2

These utilities, along with the user's `kA`, `wrap(kB)`, and `signToken` will complete the response phase of `getSignToken2` in #35.

Still todo will be verifying the users `M1` value based on their `A` parameter (srp.js will help here).