rename Signature to HMAC, since that's what it is.
Add a HMAC implementation based on top of APR's SHA1.

No unit-tests yet, but conforms to the HMAC-SHA1 Spec
Use constants for the digest size instead of hard-coding things