replaced appSigningKey with signingKey