Did nsec.app receive the authorization request? Did you allow it access to sign messages?