Sign urls and verify signatures