Add test to verify all download requests are signed