Put signature in the "sig" param.

- HTTP specs don't allow both a param list and a base64 value.
- Move signature base64 value into a "sig" param.
- Update signer, parser, spec doc, and all tests.
- Make parser more strict.