Add in hmac signing/verification

To prevent nefarious users from providing there own trace-id
set use the hmac algorithm to create a message authentication
code that ensures that headers provided are only created by
entities with the hmac key.