You need to draw up a document outlining a sites requirements before work even begins. Anything outside of these requirements needs to be re-negotiated.
And yes, you should always get sign-off on work completed.
Generally I work on the principle of 1/3 upfront, 1/3 at beta and the final 3rd when the spec is completed.