Sign API HTTP Requests using HMAC