hmac authentication tools for WAI apps