[BUGFIX] compare calculated SHA against given SHASIGN

It seems that isCorrectSHA() is comparing the calculated SHA against itself and not the SHASIGN from the request params. This is severe since the method returns true with manipulated params.