package: set mocha/istanbul versions
tests: add signWith tests
tests: signWith tests should use unspent fixtures over custom hash