Adding HMAC token authentication