Authentication with user, policy and signature parameters
Expiration time must be less than 1 hour