HMAC implementation; quick&dirty, need proper documentation.
Veriable changes: signature -> hmac, authorized -> authorized_aes