sign certificates

fixes #3
updates from review
Merge pull request #19 from callahad/certifier

sign certificates
Merge branch 'master' into caching
Add caching headers for the cert signing url