added signature authorization into api (re #325)