Verify HTTP signatures only when request accepts "activity+json" type