verify
HmacTokenSigner TokenSigner