Use sameorigin.herokuapp.com for fetching signatures from remote URLs.