use pubkey hash address comparison in VerifyMessage, instead of private keys

Fix for #123