md5 hmac signing works