GET api request signing

Nearly all endpoints are currently broken for OTM2 (meaning, android has not been converted), so to keep this task in focus, I only enabled this on GET requests, specifically the "/user" endpoint.  There is likely additional work to be done for POST requests with a body, especially images.