replaced APP_SIGNING_KEY with TENANT_SIGNING_KEY