application payload authentication with RSA keys