spec for validating signed request
fix merge conflicts