Need verification of username for tap backs

[AndrewCLu]

Client should check that the username matches the signaturePublicKey. maybe public key/name registry makes sense here