Password Authentication using Scrypt using additional HMAC protection