Fix validator app registration on remote server: sign token exchange with app credentials