Remove unused import
Big update; publish StringForSignature, remove LoginUrl, web client conforms (mostly) to new spec