fixed a bug with the secret key used to sign the base string