Signature verification

This fixes a security flaw in the `parse_signed_request` function. I'm not the only one to encounter issues with this code - see http://stackoverflow.com/questions/24463410/bigcommerce-fail-to-verify-the-load-callbacks