API: now using aws-sdk to create signatures for CORS upload in webapp, no more 403s!