Externalize API URL signing (bug 896791)