OAuth signature should be verified against URL provided to the tool.

OAuth signature should be verified against URL provided to the tool. There is possibility that a proxy will change URL along the way (for example protocol from https to http) which would invalidate signature.

Details of the problem: 
  MITx course that launches next week is using LTI integration with lms.mitx.mit.edu. Their LTI integration correctly responds to the LTI parameters send their way, but when the request gets passed through the stack protocol on request gets changed from HTTPS to HTTP. This results in XModule failing to validate request signature.

The modification is to the code originally written by @cpennington. 
As above.