finally got atom wsse auth working. turns out i was doing everything right, except i was using an sha1 hex string output instead of the raw binary output. it would have been nice to actually specify this in the fucking spec, since most sha1 libraries output the hex string version. urgh.