Only sign protocol, server and path for URLs.

Parameters may change at runtime, so they are no good for signing.

Fixes #138.