Fixed return url tests

Also allowed passing of secret key to signature