Sign username, walletId, and lockVersion in params