add API link to menu; update signature check for POST-requests