Changes the way API requests are signed.

Thee string used to produce a HMAC token now include the method, endpoint and verb to protect the system against "empty" requests