use more robust hmac system for message reply email handling