donations/update: requests must be signed