HMAC/Access token fixes

Took out the ToLowerInvariant from the PathAndQuery portion of the Hmac
header (fixes the unit test), and fixed the access token request to use
the app id for the URI and the mac key id for the actual hmac signing.
Pitch can now successfully get a real access token!