verify timestamp before hmac

Per spec change in 0514d7da83fad49697ab2b150a9d48504107e4ba.