stricter equality match on signing version
add canonicalize_userid guarded by signing version
internal_sign with signing_version guard
replace internal_sign with create_signature
remove signing version from decrypt_sig
uppercase all defines
cleaning up guards on verify_sig
getting rid of exception handling