removed quotes wrapping a nonce var