changed signer hash to hmac-sha256 from rsa