renamed sign_requests to authenticate
renamed <token> url param to <call-token>
renamed provider <token> to <provider_token>