doc update - cs3a - hmac byte length

The cs3a doc previously noted that the onetimeauth hmac was 32 bytes in length.  Per the NaCl documentation, the hmac is 16 bytes.  This diff corrects that value.

It also makes a minor change to the sender code example for clarity.

Thanks!
cody