GUI-188

moved signing of STS request to client side. use hidden for to submit new request