valid_signature? also checks if the header is present