made http-signature a dependency