some changes on requestattestation and hmac code