Fix how the iframe is signed.

Use hmac module instad of plain md5 to sign the url included in Klout's
iframe.
Merge branch 'fix-iframe-keyed-hashing'