Loose dependency on http_signature a bit