storage: support signed urls. fixes #49.