https://mp.weixin.qq.com/debug/wxadoc/dev/api/signature.html?t=2017112
signature = sha1( rawData + session_key )
不是多余的,签名字符串要加上 session_key