add DEBUG support
fix Client#signedUrl() query-string param support

otherwise response-content-disposition etc break the signature