Add signed_host config param

[twifkak]

If specified, it would replace the host for the fallbackURL being signed. Otherwise, the current logic would apply (replace with html_host, or else don't replace).

Unlike html_host, signed_host would not affect where the URL is being fetched from.