App now uses server's public key to verify data is from the server