verify backend's fernet signature in the router