signature verification bug fix