Don't 200 if the request doesn't include the signature header.