Check signatures of API requests (#3671)