Verify the payload signature if the secret token is available