Sign once

Fix #372

I wrote [verify.jar](https://github.com/bootstraponline/verify/blob/master/src/v/Verify.java) which can tell if the apk is signed with Appium's debug cert.