Use hmacSha256 const instead of hard-coded string