Replacing make_secure_token usage in client secret generation with custom hmac