Use HMAC-MD5 rather than plain MD5