chrome restricts use of crypto.subtle to secure origns, so signature stuff will only work on https: sites.
clean up crypto code