Signing process, xAuth