don't double-sign a URL