use timestamp for login signature