Sign file URLs