Send hmac of account secret, not the secret itself, in payment triggers

[Klakurka]

[chedieck]

we will have to change from sending a hmac to sending signature, in order for it to be verifiable with assymetric cryptography