add signature check using HttpRequest

+ more tests