add hmac verification