Signed assertions

This provides signatures for manual testing, but doesn't expose them particularly usefully for automated testing. I suspect all the functionality made available through urls should also be available on some object for assertion-building in tests without running the server.