Sign requests via headers

This PR enables signing requests by using request headers (as an alternative to using query params). The headers used are `X-Imbo-Authenticate-Signature` and `X-Imbo-Authenticate-Timestamp`.