added signature check for api_handler