Verify that LPToken is correctly signed

Redirects from laterpay API's `/gettoken` endpoint contain `lptoken` param.

We should verify signatures for theses requests as stated in [documentation](https://www.laterpay.net/developers/docs/backend-api) before we conclude the `lptoken` is valid