verify Fireplace shared-secret tokens (bug 1079529)