Don't include the query string when signing

The query string should not be included in the hashed path when
constructing the signed header.

Unfortunately, I couldn't figure out a good way to test this.