Fixed HMAC with query params