The bank only signs the symmetric key, not the content. What stops the user impersonating the bank's server after the fact?