hmac_fail test use Rack::SimpleAuth#digest