Whether there is a body or not in the HTTP request, the mac should always be included and checked.