lazily loaded Signature, along with SecureCookie test cases