added logging of invalid hmac and auth tag