sodium: hmac based authentication added