use MACBYTES from libsodium, don't reimplement
fix crypto_box_open_to: return 1 on success