update tests and switch to HMAC signature