signing the request packets with HMAC should only be a few lines of code if I use https://pythonhosted.org/itsdangerous/