finished implemeting verification on object GET.
added keys DB by username instead of hardcoded keys.
fixed various bugs in handling requests that are not for objects (e.g. container).
introduced new bug (vuln. actually) that allows adversary to successfully tamper with objects by setting her own username in the metadata. that sucks.