Generating secret keys
Authorisation using secret keys works
Only checking upload params signature when an API key is used