HMAC support

Simple implementation reading users from config file. Should we store users in the DB instead? Not sure where responsibility lies between modules there. Are we ready for the "API user" concept in moxie core?

Depends on https://github.com/ox-it/moxie/pull/39