Here we will use req.hawkId which is the hmac of `hawk.id`