don't decode when generating signature