Updated readme and routes, and added signature to prevent open redirects