diff --git a/app/main.py b/app/main.py
index 3c7d47e..933b43c 100644
--- a/app/main.py
+++ b/app/main.py
@@ -720,10 +720,8 @@ async def leasing_v1_lessor(request: Request):
 
     logger.debug(response)
 
-    signature = randbytes(256).hex()
-    signature = f'b\'{signature}\''
-
-    return JSONr(response, headers={'access-control-expose-headers': 'x-nls-signature', 'x-nls-signature': signature})
+    signature = f'b\'{randbytes(256).hex()}\''
+    return JSONr(response, headers={'access-control-expose-headers': 'X-NLS-Signature', 'x-nls-signature': signature})
 
 
 # venv/lib/python3.9/site-packages/nls_services_lease/test/test_lease_multi_controller.py
@@ -772,7 +770,8 @@ async def leasing_v1_lease_renew(request: Request, lease_ref: str):
 
     Lease.renew(db, entity, expires, cur_time)
 
-    return JSONr(response)
+    signature = f'b\'{randbytes(256).hex()}\''
+    return JSONr(response, headers={'access-control-expose-headers': 'X-NLS-Signature', 'x-nls-signature': signature})
 
 
 # venv/lib/python3.9/site-packages/nls_services_lease/test/test_lease_single_controller.py
diff --git a/test/main.py b/test/main.py
index 269f0fd..cbba5aa 100644
--- a/test/main.py
+++ b/test/main.py
@@ -244,6 +244,8 @@ def test_leasing_v1_lease_renew():
 
     client_challenge = response.json().get('client_challenge')
     assert client_challenge == payload.get('client_challenge')
+    signature = eval(response.headers.get('x-nls-signature'))
+    assert len(signature) == 512
 
     lease_ref = response.json().get('lease_ref')
     assert len(lease_ref) == 36