added HMAC tokens to todo list