Withdraw counter

[aguillon]

We now use a nonce to protect from replay attacks. I don't think that was such a big issue, but oh well.

This requires a new change in the front-end:

• you may use the GET /withdraw_counter/{user_address} endpoint
• you need to sign it as well.