moved to httpsig for signing. upgrading package to 0.2.x