forgot to include hmac but now it works