Remove 'q' from secret address chars

Consistently confused with g for some reason m(
Add custom S3BotoStorage that forces signed URLs