#signature clear

HMAC signature mismatch: payload_hex.encode() vs bytes.fromhex() in token verify