Fixes for canonicalize_url, object ACL query, signed URLs