require OpenSSL signed urls cntllr