You use the old address. When signing, the app will automatically use the rekey'd address to sign.