add enforce signed header

Ref: http://instagram.com/developer/restrict-api-requests/