use hmac_sha1_sum instead of hmac_md5_sum