Sign form data to ensure it is not tampered with

[ekoyle]

This adds a server secret and uses it to sign the generated url with a timestamp to prevent client-side tampering.

Needs testing and will break existing installations due to additional configuration options.

fixes #57