use the same signedRequest in the test

`makeSignedRequest()` uses `time()` which might straddle a second boundary. Lets not call it twice.

Closes #117