Tamper-proof URLs with Signed authentication