in lib/aws/session_store/dynamo_db/rack_middleware.rb [112:118]
def verify_hmac(sid)
return unless sid
digest, ver_sid = sid.split("--")
return false unless ver_sid
digest == generate_hmac(ver_sid, @config.secret_key)
end