This App must be invoked via a signed request!