starting with version 2
using ConsumerAuthentication to validate signature