using hmac from cryptoJS