set APP_SIGNING_KEY when connection was configured
secure users endpoint
replaced APP_SIGNING_KEY with TENANT_SIGNING_KEY