Fix: Require token exchange to be signed with app credentials
Fix generating meta post