Fix for vulnerabilities from Mark Dowd

 - also fix nounce header size
prep for next release