add tests for accepting invalid signatures.