diff --git a/modules/backend/src/test/scala/docspell/backend/auth/AuthTokenTest.scala b/modules/backend/src/test/scala/docspell/backend/auth/AuthTokenTest.scala
index 97cc7b78..10aa99f1 100644
--- a/modules/backend/src/test/scala/docspell/backend/auth/AuthTokenTest.scala
+++ b/modules/backend/src/test/scala/docspell/backend/auth/AuthTokenTest.scala
@@ -34,4 +34,17 @@ class AuthTokenTest extends CatsEffectSuite {
       !token2.copy(valid = Duration.minutes(10).some).validate(secret, Duration.millis(0))
     )
   }
+
+  test("signature") {
+    val token1 = AuthToken.user[IO](user, false, secret, None).unsafeRunSync()
+    val token2 =
+      AuthToken.user[IO](user, false, secret, Duration.seconds(10).some).unsafeRunSync()
+
+    assert(token1.sigValid(secret))
+    assert(token1.sigInvalid(otherSecret))
+    assert(token1.copy(valid = Duration.seconds(100).some).sigInvalid(secret))
+
+    assert(token2.sigValid(secret))
+    assert(token2.sigInvalid(otherSecret))
+  }
 }
diff --git a/modules/restserver/src/main/scala/docspell/restserver/routes/ItemSearchPart.scala b/modules/restserver/src/main/scala/docspell/restserver/routes/ItemSearchPart.scala
index 00775d94..12aec359 100644
--- a/modules/restserver/src/main/scala/docspell/restserver/routes/ItemSearchPart.scala
+++ b/modules/restserver/src/main/scala/docspell/restserver/routes/ItemSearchPart.scala
@@ -108,7 +108,7 @@ final class ItemSearchPart[F[_]: Async](
         identity,
         res =>
           for {
-            _ <- logger.warn(s"Searching with query: $res")
+            _ <- logger.debug(s"Searching with query: $res")
             items <- searchOps
               .searchSelect(details, cfg.maxNoteLength, today.some, batch)(
                 res.q,