Validate the redirect signature