Decode b64_hmac before inserting into `Authorization` header to prevent
`Authorization` header from having b'' in it with Python 3