Load signing key and verify the message
base64 content signature req.headers[x-content-signature]
verifies callback signature
Load signing key and verify the message