add test for fxa cert signing