get some constants out of the way
perform message integrity check aka auth