Authenticating a REST service built in Node.js (Express, MongoDB) using HMAC