Require sorting of header values before signing to enforce consistency and reduce likelihood of broken client implementations