[Fixes #11] Bump SF2 version, UriSigner requires 2.2 or higher. Added url sign when OTP invalid failure redirect occured. Changed CHENGELOG.md