Sign response signature needs to be verified and error returned if invalid. https://github.com/coinkite/coinkite-tap-proto/blob/master/docs/protocol.md#sign