fixed security issue around event verification

the use of id has been removed and the hash is computed instead

event.ts

@@ -73,10 +73,8 @@ export function validateEvent(event: Event): boolean {
   return true
 }
 
-export function verifySignature(
+export function verifySignature(event: Event & {sig: string}): boolean {
-  event: Event & {id: string; sig: string}
+  return secp256k1.schnorr.verifySync(event.sig, getEventHash(event), event.pubkey)
-): boolean {
-  return secp256k1.schnorr.verifySync(event.sig, event.id, event.pubkey)
 }
 
 export function signEvent(event: Event, key: string): string {