This adds HMAC signatures to JSON data and token validation to HTTP posts.
Verify that the export/publish/revert flow is till working correctly.