Use Rack::secure_compare to verify the signature