Sign URLs to tamper-proof them