add signature verification for authorized actions