Yeah but it is a weird flow, I generate key and give user the string, they then need to sign and give back to me. Would be better if the user could generate the string in their app and give me the private key along with all the other info, then there's no need for all the back and forth.