HMAC authentication in ASP.NET Web API