sign the package