TestClient: add signature verification