rest request signing