nonce parameter was getting clobbered by a local variable name