Added 'urldecode' to the value in Sha1Composer (following the documentation)

[evertharmeling]

Documentation:

Please note: When verifying a received signature. first url-decode all the field values. A signature is always calculated over the non-encoded values (i.e. The value "J.+de+Tester" should be decoded to "J. de Tester").