now we're checking sigs properly!