Revert "hmac_sha1_hex() returns a 41 (not 40) character value"

This reverts commit 4d9b658677f60b024c2c94774f1caa3dbcdf13d0.

turns out newlines count as characters too. derp.