bug 3204: tweaks to AWS request signing