Improved validation in SignedRequest::decode()
User can provide custom appsecret_proof