return data in json
post signature separately and deprecate clear signatures

this doesn't save the signer yet!!