Add HMAC authentication