request signing and timestamp verification