resetting the cipher is just a precaution but i feels saver with than without it ;)
fixing the padding scheme, this was wrong in 3 different ways: block size, packing of the bytes and non-padding of block size multiples
`#sign` is already Base64 encoded data, so it must not be encoded again, and again ... and again
fixing CCT order type
preparing 1.1.1 release