using ConsumerAuthentication to validate signature