setBasePath must be called before validateRequest

else signature could be calculated wrongly