sort x-amz-* headers before signing them

per
http://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html#ConstructingTheAuthenticationHeader
the x-amz-* headers need to be sorted before signing.