Two variable leaks

[sreuter]

1. hmac.digest(encoding = 'base64'); <--- fix docs to not suggest variable leaks nodejs/node-v0.x-archive#2106
2. //return the string to sign.
   return stringToSign =