fix signing to match verify