Implements fb's signature confirmation to authenticate userId from client-side against fb. Adds utils to decode base64forUrl and HmacSHA-256.