id injection now done as part of signing