wrap the HMACSHA1 instance in a using block

Thank you Bill Sun for reporting this!