Validate HMAC signature during callback phase

As per: http://docs.shopify.com/api/authentication/oauth#verification