use constant for "HmacSHA256"