Use mutex to sign only one request at a time; fixes #13