Switch to HMAC-SHA256-128.

This allows us to drop the requirement for a constant stream of nonces, as well as reduce the token size significantly.