Use hmac.Equal instead of string equals