disable HMAC verification until it can be properly integrated