signature middleware for control API