use consistent values for url and key and similar calling styles (passing values as command line arguments. Also use more utilities from the language standard library, such as java.util.Base64.
it's a little bit rough, but seems to work pretty well. Ref #145
URL-only signatures are still accepted, though no longer recommended. Fixes #145