sign the hash