A.1.2.2 Switch from MD5 to SHA1

Pickles embedded in hidden fields are now signed using the HMAC-SHA1 algorithm (was MD5).