Make generateHMacSHA256 method public so we can call it from the test
Auth methods can always called without authentication
Add a first test for authentication