PHP example: Don't url_encode args before calculating HMAC