signature must include content-type