return only the signature in sign and use the tss proof to validate the validators

[frankiebee]

currently sign returns the first index of the requesting sigs fetch. however the second index is the proof that it came from the right validator and that the sig is not intercepted should be checking the proof against the validator public key to ensure its not a malicious validator.

[frankiebee]

same as #203 😬