added a test for responses with an invalid signature