signature is still failing to verify