don't modify key in constructor, generate on the fly instead.
write test for signed form upload.