Ensures that the connection has a valid Shopify HMAC token in the URL param, then sets conn.private.valid_hmac in the conn. You may want to handle this in your entry point by allowing the user without a valid HMAC to an install app page.