Refactor _callApi() to properly sign POST requests

Previously, some POST requests were not being signed correctly. This
refactors how _callApi() works to properly sign GET and POST requests.