verify identity before signing