refactor based on brendan's suggestions
set up code signing