Remove Hash extension as Rails provides this.
Remove CGA requirement, use Rack Utils instead
enforce 5 minute timeout on signature check