hmac improvements

[arj03]

I was looking at how we handle hmac currently and found a few things:

• hmacKey is always defined to null, it should be possible to set it from config
• sometimes the variable is not used

Should be done on top of this branch