doing signature verify