Implements PlSession::apiAuth. The authentication is based on a HMAC