refactor SagePay signature checking and added some extra logging info to diagnose problems which can be turned on and off (to prevent giving away security information in production)