URL encode the signature and token when sent for verification