this comment is still correct, unfortnately. This changes only how the request is signed on the client side. It previously wasn't using the data in the querystring, thus generating wrong signatures, meaning the auth was rejected on the server side.