verify required headers are signed