Generating secret keys
Authorisation using secret keys works
Only checking upload params signature when an API key is used
Merge branch 'master' into heroku