Fix `hash_hmac` arguments order

`hash_hmac` expects `data` first then `key`