added signature verification for updates