add signature compare to secure payload endpoint
remove hardcoded settings
minor improvements