cloud/storage: escape signed URL params, use HTTPS

Change-Id: Ic87fd9ef5dfc9035b38f92b18cfca6fe8dcccde1