Spreadshirt API login & fetch designs working code

# -*- coding: utf-8 -*-
import hashlib
import time
import requests

# configuration
apiKey = "XXX" # api key
secret = "XXX" # api secret
email = "XXX" # login email address
password = "XXX" # login password
userId = "XXX" # account user id

# code
xml = """<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<login xmlns:xlink="http://www.w3.org/1999/xlink"
       xmlns="http://api.spreadshirt.net">
   <username>"""+email+"""</username>
   <password>"""+password+"""</password>
</login>"""
log_in = requests.post("https://api.spreadshirt.net/api/v1/sessions", data=xml)
session_id = dict(log_in.headers)["Location"][44:]


time = str(int(time.time())*1000)
method = "GET"
url = "https://api.spreadshirt.net/api/v1/users/" + userId + "/designs"
data = method + ' ' + url + ' ' + time
sig = hashlib.sha1(str(data + ' ' + secret).encode('utf-8'))

header = {"Authorization": "SprdAuth apiKey=\"" + apiKey + "\", data=\"" + data + "\", sig=\"" + sig.hexdigest() + "\", sessionId=\"" +
          session_id + "\"", "User-Agent": "Python-test/1.0 (http://www.spreadplugin.de; thimo@grauerholz.de)", "Content-Type": "application/xml"}
r = requests.get(url, headers=header)
print(r.request.headers)
print(r.text)