signature logic works better with curl uploads