When falling back to the transfer secret we need to set the global cfg.URLSigningSecret as well otherwise the Validate() step fails.
When falling back to the transfer secret we need to set the global cfg.URLSigningSecret as well otherwise the Validate() step fails.