correctly verify http-signature

package.json

@@ -56,7 +56,7 @@
     "email-templates": "^6.0.0",
     "express": "^4.17.1",
     "express-jwt": "^5.3.1",
-    "fetch": "^1.1.0",
+    "http-signature": "^1.2.0",
     "ics": "^2.15.1",
     "inquirer": "^6.5.0",
     "jsonwebtoken": "^8.5.1",
@@ -65,6 +65,7 @@
     "mastodon-api": "lesion/mastodon-api",
     "morgan": "^1.9.1",
     "multer": "^1.4.2",
+    "node-fetch": "^2.6.0",
     "nuxt": "^2.8.1",
     "pg": "^7.11.0",
     "sass-loader": "^7.1.0",