Fix the signature list size calculation

While merging the hashes into the previous request, the list size
mistakenly included the signature list header, and this made the
request invalid.

Signed-off-by: Gary Ching-Pang Lin <glin@suse.com>