Proxy security by URL signing