verify signiture