Add in hmac signing/verification

To prevent nefarious users from providing there own trace-id
set use the hmac algorithm to create a message authentication
code that ensures that headers provided are only created by
entities with the hmac key.
Merge pull request #3 from harlowja/secure-hmac

Add in hmac signing/verification