signing with json payload works