add signing headers