Implement HS256 verify