check for site_id tampering, check signature against feed_id