s3:smb2_server: verify the signature before the session_status