Add secret token as parameter
Check signature using HMAC if secret token is passed